Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
File: ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft (raw, json)
Hash identifier: ChsJxmnqmFOojvO5zMEKk6xUDRp7ESE8Fp3yd4T85Is=
Subject key identifier: C3:BC:4D:D5:26:10:12:87:E3:2C:9E:BD:04:3E:53:D7:F9:FB:C1:AA
Authority key identifier: 65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14
Certificate issuer: /CN=65295913c07c226100bd39f1ee2c52ea98aaee14
Certificate serial: 0199FC8F89A81E0275174EB99169BC456DCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
Manifest number: 126E
Signing time: Sun 19 Oct 2025 13:01:29 +0000
Manifest this update: Sun 19 Oct 2025 13:01:29 +0000
Manifest next update: Mon 20 Oct 2025 13:01:29 +0000
Files and hashes: 1: UzhPx96yGOR4LTMi9dIu864aqsY.roa (hash: bKjirubIh89AKZTNw76UL/cnaoe6Ib86+oTooy6mls0=)
2: ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl (hash: /x4qNnBh8xuvPIfeIqk+tSH6jF5IkuC+vbZMJsE0A/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:89:a8:1e:02:75:17:4e:b9:91:69:bc:45:6d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65295913c07c226100bd39f1ee2c52ea98aaee14
Validity
Not Before: Oct 19 13:01:29 2025 GMT
Not After : Oct 20 13:01:29 2025 GMT
Subject: CN=c3bc4dd526101287e32c9ebd043e53d7f9fbc1aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:dc:b8:17:b7:20:6c:ad:a5:3c:73:28:50:69:
bb:4e:44:57:a5:15:35:81:17:f8:42:64:9a:93:d3:
f0:5a:b3:bd:95:54:8a:c2:2b:fd:dc:75:04:f8:c9:
93:94:ac:9f:ba:ae:f1:a8:da:b3:2e:4c:61:82:d5:
a5:b0:e7:28:af:e5:ae:cc:d8:15:9c:fb:5a:61:3e:
02:09:af:82:d2:30:01:e1:5b:00:98:dc:22:0a:50:
f1:a4:0f:c6:f1:93:bd:97:9e:bc:8a:6a:88:c0:90:
95:51:6a:6c:83:2e:a4:b1:d0:2e:3d:20:2b:a8:94:
fc:21:46:bf:5f:4d:c9:32:9b:42:65:ae:10:2d:c4:
b4:a5:1d:a0:c8:68:2b:b1:c0:bc:0a:5f:8f:6f:6d:
89:93:24:12:69:38:66:5b:4a:6b:d3:bb:d9:ef:d4:
cb:17:da:fd:7d:d8:ac:e0:86:c3:0c:73:25:17:84:
25:93:05:26:a8:70:0f:5c:c6:23:c5:a7:25:a3:91:
fa:3a:6f:96:4c:27:df:9d:a0:cb:f5:74:62:89:73:
b4:09:02:7d:25:6e:50:d6:5e:44:d9:cd:a4:81:5c:
1e:6e:fe:44:f0:6b:e8:d1:46:68:35:6f:f1:a9:d0:
f3:10:95:9a:99:08:a8:8b:d6:6f:e6:a3:6c:1c:32:
a3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BC:4D:D5:26:10:12:87:E3:2C:9E:BD:04:3E:53:D7:F9:FB:C1:AA
X509v3 Authority Key Identifier:
keyid:65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:28:5b:fa:6e:6b:80:36:a6:38:54:64:41:1f:07:66:a2:de:
ea:b6:9f:36:8b:c5:c8:6a:7f:28:2b:ee:cb:ef:da:76:a7:88:
08:47:c0:ca:50:32:a7:b0:48:8e:23:b1:82:8b:cb:0e:79:b4:
a2:cc:c2:fc:03:5b:c3:b2:98:98:a4:36:dc:99:d2:df:25:a8:
44:40:0f:05:04:a6:27:f4:69:6b:31:fc:3c:8e:16:b0:5a:e9:
5d:39:96:bc:6a:c1:33:53:f0:75:4f:22:1c:53:ca:0b:21:33:
07:02:95:3f:a7:af:77:08:ae:9c:34:e4:a5:a9:7a:ca:fc:bc:
01:fe:3d:8c:2f:58:01:0a:11:b1:c3:89:f2:f5:cb:a7:62:f7:
c9:4e:ec:e2:5f:a6:87:23:99:51:e7:95:74:fa:00:84:bc:02:
5d:e3:8c:e5:08:b5:70:ff:32:5a:c6:be:c7:22:1b:d0:4a:cf:
15:44:44:d3:b3:a1:50:48:c7:19:97:58:22:02:b8:fa:49:6a:
94:78:a2:c1:d9:cd:79:77:26:95:88:d7:c7:c3:15:c7:a1:11:
2f:bd:54:f1:d2:84:79:d7:86:6d:b3:1c:e1:92:fe:60:ce:3d:
8b:3f:55:b6:a9:06:0b:f2:5b:f3:1d:5f:2e:79:53:31:2a:87:
98:6d:96:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:04 2025 by rpki-client